canaletico.es

.es crawl

First seen 2026-04-11 · Last seen 2026-05-20 · ok HTTP/1.1 200 630 ms crawled 2026-05-19

FR · 54.36.209.74 · AS16276 OVH SAS

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title: -
Language: es

Technology

Server: nginx

DNS records live

NS

dns107.ovh.net
ns107.ovh.net

MX

1 mx4.mail.ovh.net
10 mx3.mail.ovh.net

TXT

20240315112813060yy4dia8t3zqkw2labiard23n1cd929o5edwc87lh1qwndac
7mp35842or78sv9ck2j009uprc

Verified for

Google
Microsoft 365

Email authentication weak

SPF: v=spf1 include:mx.ovh.com ~all
softfail (~all)
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

Sectigo Public Server Authentication CA DV R36

from 2025-11-24 to 2026-11-30

Expires in 193 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://atica.canaletico.es/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: DENY
permissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), accelerometer=(), gyroscope=(), magnetometer=(), fullscreen=(self)
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' https://www.google.com https://www.gstatic.com; connect-src 'self' https://api.canaletico.es; img-src 'self' data: blob: https://gpartners-pre.s3.eu-west-1.amazonaws.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; frame-src https://www.google.com https://www.gstatic.com; frame-ancestors 'none'; base-uri 'self'; form-action 'self' https://api.canaletico.es; object-src 'none';
strict-transport-security: max-age=31536000; includeSubDomains

Linked from (32)